nix elk

configuration.nix

    elasticsearch = {
      enable = true;
    };
    logstash = {
      enable = true;
      outputConfig = ''
        elasticsearch {
          protocol => http
        }
      '';
      filterConfig = "";
      inputConfig = ''
        pipe {
          command => "${pkgs.systemd}/bin/journalctl -f -o json"
          type => "syslog" codec => json {}
        }
      '';
    };
    kibana = {
      enable = true;
    };